trivy action:

CDCgov · Jan 24, 2025 · 34ec41b · 34ec41b
1 parent 816732c
commit 34ec41b
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/trivy_scan_step.yml b/.github/workflows/trivy_scan_step.yml
@@ -0,0 +1,10 @@
+- name: Run Trivy vulnerability scanner
+  uses: aquasecurity/trivy-action@master
+  with:
+    scan-type: image
+    image-ref: ${{ github.repository }}/${{ steps.parse_tag.outputs.image }}:test
+    format: table
+    exit-code: 1
+    ignore-unfixed: true
+    vuln-type: os,library
+    severity: LOW,MEDIUM,HIGH,CRITICAL